swtich permissions over to use email instead of user.username
added tests for membership edit,delete
updated docstrings
check org.edit permission before editing membership